$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa File: 2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa (raw, json) Hash identifier: iU4KuvWBA41kUgl8eNCZgohGnUPMuREOgGxjfqW2Df0= Subject key identifier: F7:3F:4C:EF:15:FE:EE:C5:9B:2D:57:78:9E:EA:A0:40:F8:A3:68:88 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584FB7D658A8732DDF920B59D280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa Signing time: Tue 03 Nov 2026 14:00:13 +0000 ROA not before: Tue 03 Nov 2026 14:00:13 +0000 ROA not after: Mon 01 Feb 2027 14:00:13 +0000 asID: 3855 IP address blocks: 199.172.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:d6:58:a8:73:2d:df:92:0b:59:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 3 14:00:13 2026 GMT Not After : Feb 1 14:00:13 2027 GMT Subject: CN=faef08a3-9800-4dcb-8050-d3b9143cc30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:e9:57:01:94:0b:7e:0b:46:6e:b7:af:b1: 94:cd:56:8c:33:fd:85:ec:ae:fa:c9:12:b3:37:61: 79:14:3e:fc:ef:f9:c7:dd:a3:4e:18:54:19:0f:94: d3:18:02:85:50:2f:e6:ee:8b:10:37:fa:24:93:43: 83:37:53:27:f5:e6:81:8f:9a:b6:59:ed:3a:87:2c: 43:64:f4:11:77:1b:f0:e1:a2:3f:d4:6f:65:9f:c2: e0:24:8d:5d:95:83:7b:b0:db:26:1a:35:68:c6:ff: e1:3e:d4:bf:11:4e:f3:c8:61:12:8f:ff:73:44:e9: 86:74:76:58:07:e9:b5:34:27:3c:f2:38:e4:cb:dd: ac:4a:95:8c:21:e2:42:2c:f1:04:11:2b:4b:54:d2: dc:ac:cc:fe:36:05:9f:56:e6:7c:1e:39:e8:b2:0e: bc:3c:92:24:8c:5c:5b:28:c7:20:b6:9b:b3:6e:38: e1:70:dc:a4:89:30:4f:46:19:b1:64:84:ac:b2:3b: f2:60:be:bc:ec:8e:7d:33:7b:7a:5c:3b:23:6e:a3: 95:54:73:2d:17:66:65:67:17:01:73:dc:59:ab:ac: 05:f0:27:b4:2c:b5:62:de:ae:9f:94:7a:7b:60:00: b8:82:b2:e5:41:03:ee:0e:b9:ff:a6:23:75:a1:57: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3F:4C:EF:15:FE:EE:C5:9B:2D:57:78:9E:EA:A0:40:F8:A3:68:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:70:04:31:b4:b3:16:aa:39:de:07:86:64:bc:5e:a1:b2:12: 2d:d8:43:bd:ba:61:79:5d:44:85:fd:8e:3b:de:d7:e3:0e:15: 27:4a:db:3c:69:4a:4e:9a:d3:68:ce:99:16:16:93:32:f3:6f: 2d:ae:28:05:ed:ff:f1:04:82:4d:a8:e4:5e:11:a5:17:d9:2f: a1:65:e5:dd:a9:de:5b:9d:f3:f7:87:d8:53:ac:5e:13:c2:03: 4c:c1:78:5f:6a:a0:09:41:ee:66:9d:19:3a:87:01:73:a0:99: 3c:3d:70:48:ce:60:88:89:d1:2c:2a:c6:66:9b:97:5d:97:57: 07:4b:f3:2d:3e:ab:4d:5b:81:a7:8a:b1:44:fe:c4:96:bb:90: a4:0b:c1:1f:3f:c6:02:f4:97:55:8e:16:f7:57:17:fb:31:8c: 6d:72:86:40:cc:c0:ba:a0:5f:13:d9:75:1c:b5:79:87:3a:90: 73:8c:97:44:1b:86:72:b2:4e:ac:b8:b0:97:e4:e9:6b:17:a6: 2f:95:96:6b:79:ca:5f:7e:20:3e:29:8f:d8:c2:2f:7d:4f:17: 92:42:8f:8e:c4:08:5e:64:9d:83:1c:7b:74:61:bb:1e:16:20: fd:bb:a1:16:2f:61:aa:ea:8a:63:02:17:9b:1d:32:85:98:5c: 97:7f:34:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+31liocy3fkgtZ0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTEwMzE0MDAxM1oXDTI3MDIwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZmFlZjA4YTMtOTgwMC00ZGNiLTgwNTAtZDNiOTE0M2NjMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0LpVwGUC34LRm63r7GUzVaMM/2F7K76yRKz N2F5FD787/nH3aNOGFQZD5TTGAKFUC/m7osQN/okk0ODN1Mn9eaBj5q2We06hyxD ZPQRdxvw4aI/1G9ln8LgJI1dlYN7sNsmGjVoxv/hPtS/EU7zyGESj/9zROmGdHZY B+m1NCc88jjky92sSpWMIeJCLPEEEStLVNLcrMz+NgWfVuZ8Hjnosg68PJIkjFxb KMcgtpuzbjjhcNykiTBPRhmxZISssjvyYL687I59M3t6XDsjbqOVVHMtF2ZlZxcB c9xZq6wF8Ce0LLVi3q6flHp7YAC4grLlQQPuDrn/piN1oVcDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc/TO8V/u7Fmy1XeJ7qoED4o2iIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmE0YWU5MGUtNTljMS0z Yzc4LThmMzEtZmNhZTcxODQyMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6znMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFwBDG0sxaqOd4HhmS8XqGyEi3YQ726YXldRIX9jjve1+MOFSdK2zxp Sk6a02jOmRYWkzLzby2uKAXt//EEgk2o5F4RpRfZL6Fl5d2p3lud8/eH2FOsXhPC A0zBeF9qoAlB7madGTqHAXOgmTw9cEjOYIiJ0Swqxmabl12XVwdL8y0+q01bgaeK sUT+xJa7kKQLwR8/xgL0l1WOFvdXF/sxjG1yhkDMwLqgXxPZdRy1eYc6kHOMl0Qb hnKyTqy4sJfk6WsXpi+Vlmt5yl9+ID4pj9jCL31PF5JCj47ECF5knYMce3Rhux4W IP27oRYvYarqimMCF5sdMoWYXJd/NH0= -----END CERTIFICATE-----Generated at Thu Nov 5 03:17:27 2026 by rpki-client